Weird System Log entries referencing /usr/local/www/sdk

jcpro101

Hi everyone,

I'm seeing some weird entries in the System Log for both of my HA pfSense+ units running 21.05.
One of the internal IP's referenced 192.168.100.30 is just a Hypervisor Host and doesn't have browsers open or requests being made to any of the pfSense units that I can tell.

Can anyone help me decipher why two internal systems would be trying to "POST /sdk HTTP/1.1", host: "192.168.100.2" to the pfSense units?

alt text

jimp

Whatever local clients those are on 192.168.0.30 and 192.168.0.45 are sending a POST to the firewall web server.

You'll have to see what's running on those to know what they're doing.